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CLAIMS 

We claim: 

1 . A mkhod for applying adaptive security to a data stream, comprising the 
steps of: \ 

identifying a desired security level range and a desired actual security level which 
falls within the desiredlsecurity level range for communicating a data stream from a send 
host to a receive host; \ 

determining an actual security level in the receive host based upon the availability 
of a number of security processor operations; 

communicating the\actual security level from the receive host to the send host; 

generating a plurality of data packets associated with the data stream in the send 
host, the data packets havinaan authentication header including the desired security level 
range and the actual security level; 

reallocating computing! resources at the receive host if data packets cannot be 
verified at the desired actual security level with a current allocation of resources; and 

verifying the data packets at the actual security level, the actual security level 
being within the desired security level range. 

2. The method of claimU, further comprising the step of altering the actual 
security level in the send host using a security level thermostat. 
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1 3. The method of claim 1, wherein the step of reallocating computing 

2 resources at the receivelhost comprises identifying the availability of a number of security 

3 operations per second (SOPS) employed in non-critical operations at the receive host and 

4 reallocating these SOPS for processing the data stream. 

1 4. The method of claim 1 , further comprising the step of determining the 

2 bandwidth of the data stream being sent from the send host to the receive host. 

1 5. The method of claim 4, further comprising the step of reallocating 

2 communication resources if there are insufficient computing resources available for 

3 reallocation at the receive host. \ 

1 6. The method of claim 5, wherein the step of reallocating communication 

2 resources comprises adjusting the bandwidth of the data stream. 

1 7. The method of claim \6, further comprising the step of identifying the 

2 number of security operations per second (SOPS) that will be required to process the data 

3 stream and comparing this number with uie number of SOPS available at the receive host 

4 to determine the amount of bandwidth adjustment needed. 
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1 8. The method of claim 6, wherein the bandwidth is adjusted by decreasing 

2 data transmission ratei 

1 9. The method of claim 6, wherein the bandwidth is adjusted by increasing a 

2 data portion of the data packets to lower a security:message ratio of the data packets. 

1 10. The method\of claim 6, further comprising the step of calibrating the 

2 computing resources with the communication resources. 
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1 11. A method for communicating and applying adaptive security to a data 

2 stream comprising aplurality of data packets, comprising the steps of: 

3 identifying a desired security level range and a desired actual security level which 

4 falls within the desirefl security level range for the data stream to be received by a host; 

5 determining th^ availability of a number of security processor operations at the 

6 host; 

7 reallocating commuting resources at the host if the data stream cannot be verified 

8 at the desired actual security level; 

9 reallocating communication resources if there are insufficient computing 

10 resources available for reallocation at the host; and 

11 verifying the data packets at the actual security level, the actual security level 

12 being within the desired secumty level range. 
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1 12. The method of\claim 11, wherein the step of reallocating computing 

2 resources at the host comprises identifying the availability of a number of security 

3 operations per second (SOPS) employed in non-critical operations at the host and 

4 reallocating these SOPS for processing the data stream. 
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1 13. The method of claim 11, wherein the step of reallocating communication 

2 resources comprises adjusting the bandwidth of the data stream. 

1 14. The method of claim 13, further comprising the step of identifying the 

2 number of security operations per second (SOPS) that will be required to process the data 

3 stream and comparing this number with the number of SOPS available at the receive host 

4 to determine the amount on bandwidth adjustment needed. 

1 15. The method or claim 13, wherein the bandwidth is adjusted by decreasing 

2 data transmission rate. \ 

1 16. The method of claim 13, wherein the bandwidth is adjusted by increasing a 

2 data portion of the data packets ta lower a security:message ratio of the data packets. 

1 17. The method of claim 11, further comprising the step of calibrating the 

2 computing resources with the communication resources. 
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18. A system for facilitating data communication to a host with adaptive 



2 security, comprising: 

3 means for detdbnining whether a desired actual security level for a transmitted 

4 data stream falls withima desired security level range; 

5 means for determining the availability of a number of security processor 

6 operations at the host; 

7 means for reallocating computing resources at the host if the data stream cannot 

8 be verified at the desired acmial security level; and 

9 means for reallocating communication resources if there are insufficient 
10 computing resources available for reallocation at the host. 

1 19. The system of claim 18, wherein the means for determining the availability 

2 of a number of security processor operations comprises means for determining a 

3 processor time availability by examining a resource tracking table for a non-critical 

4 processor time usage of at least one existing data stream. 



1 20. The system of claim 18, wherein the means for determining the availability 

2 of a number of security processor^ operations comprises means for identifying the 

3 availability of a number of security operations per second (SOPS) employed in non- 

4 critical operations at the host and reallocating these SOPS for processing the data stream. 
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21. The system claim 18, wherein the means for reallocating communication 
resources comprises means for adjusting the bandwidth of the data stream. 

22. The systebn of claim 21, wherein the means for adjusting the bandwidth of 
the data stream comprises means for decreasing the data transmission rate. 

23. The systemlof claim 21, wherein the means for adjusting the bandwidth of 
the data stream comprises means for increasing a data portion of data packets of the data 
stream to lower a security:message ratio of the data packets. 

24. The system ofi claim 18, further comprising means for calibrating the 
computing resources with the communication resources. 



54 



TKHR Docket No. 62004-1330 

25. A computer program embodied on a computer-readable medium for 
facilitating data communication to a host with adaptive security, comprising: 

logic configured to determine whether a desired actual security level for a 
transmitted data stream tails within a desired security level range; 

logic configured to determine the availability of a number of security processor 
operations at the host; \ 

logic configured toi reallocate computing resources at the host if the data stream 
cannot be verified at the desired actual security level; and 

logic configured to reallocate communication resources if there are insufficient 
computing resources available for reallocation at the host. 

26. The computer program of claim 25, wherein the logic configured to 
determine the availability of a number of security processor operations comprises logic 
configured to determine a processor time availability by examining a resource tracking 
table for a non-critical processor time usage of at least one existing data stream. 
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27. The co] 
determine the availabil 
configured to identify 



puter program of claim 25, wherein the logic configured to 
ty of a number of security processor operations comprises logic 
the availability of a number of security operations per second 



(SOPS) employed in non-critical operations at the host and reallocate these SOPS 
available for processing me data stream. 



28. The computer program of claim 25, wherein the logic configured to 



reallocate communicatio 
of the data stream. 



resources comprises logic configured to adjust the bandwidth 
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1 29. The computer program of claim 28, wherein the logic configured to adjust 

2 the bandwidth of the da^a stream comprises logic configured to decrease the data 

3 transmission rate. 



1 30. The computer program of claim 28, wherein the logic configured to adjust 

2 the bandwidth of the data stream comprises logic configured to increase a data portion of 

3 data packets of the data stream to lower a securityrmessage ratio of the data packets. 

1 31. The computer program of claim 25, further comprising logic configured to 



2 calibrate the computing resources with the communication resources. 
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